Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft
File:                     2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json)
Hash identifier:          3lXpKMZ4m5j7Czc883sr4EtI7Oab9g01zP6udS62TGs=
Subject key identifier:   EA:43:3E:83:85:FF:A7:9C:05:07:D8:02:2C:AF:88:90:A6:4E:B0:D8
Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD
Certificate issuer:       /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD
Certificate serial:       7E3E4B70EBE9D721246EEFE7E61926949C694EC5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft
Manifest number:          048F
Signing time:             Thu 27 Mar 2025 21:41:56 +0000
Manifest this update:     Thu 27 Mar 2025 21:36:56 +0000
Manifest next update:     Mon 31 Mar 2025 07:25:56 +0000
Files and hashes:         1: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: BuvczQEbe/bdskV+ebbMfwgi2QgHhXaT52MUJAQ4Uu4=)
                          2: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: b3QtB4OgqdRWfaRrhbvsm6gH1TsKPXL5Yz9+wyHqUXg=)
                          3: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: mAylxMr8+d8mR8LWIKVq/3AjBIk2gwxyYbF7kLOA17c=)
                          4: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: KC/48KyBK866tyRqnFAk104o6NtYIjI9BYH4NY1WGf4=)
                          5: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: h7IiV0kh9O/RK06uMG1rhN5D8mRuZrUlThAbqSxDils=)
                          6: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nGOhkS+SCCrJt9wmjNL7Gorc9U1h3Xuifw+uaNxyRl4=)
                          7: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: LxSxJap20ZFYKnGxrHjrctrqh/OFQLlXdqLmbADBqOI=)
                          8: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3e:4b:70:eb:e9:d7:21:24:6e:ef:e7:e6:19:26:94:9c:69:4e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD
        Validity
            Not Before: Mar 27 21:36:56 2025 GMT
            Not After : Mar 31 07:25:56 2025 GMT
        Subject: CN=EA433E8385FFA79C0507D8022CAF8890A64EB0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5f:1a:22:80:6d:71:fc:8c:d5:08:93:3f:34:
                    70:c3:44:b7:fa:72:d7:b3:a4:08:0d:ce:97:5e:bc:
                    2c:d0:3d:c8:c5:21:6b:95:5d:0a:99:5e:ec:b9:f6:
                    57:9d:22:14:e5:77:6a:a3:48:69:73:36:e6:2e:cc:
                    15:6e:db:de:4f:73:43:16:67:77:57:aa:d0:8b:fb:
                    fd:3c:4d:99:70:06:22:6f:c1:72:7e:92:3a:30:b0:
                    56:e4:40:29:4a:e4:9c:e0:64:70:d4:b1:18:74:25:
                    ef:fe:a9:54:3e:18:4b:1d:d9:d9:f9:b2:54:5a:25:
                    96:19:98:07:68:76:92:e1:41:3a:be:28:61:28:a2:
                    fd:d1:8a:5f:ec:b2:7e:22:d7:b9:d8:58:86:75:79:
                    6f:75:12:23:83:c2:b8:e1:ec:5c:48:9e:08:44:a9:
                    3b:3e:dc:a5:0d:18:de:e4:98:25:14:08:f5:54:59:
                    f9:6e:fc:23:3b:5f:e0:17:31:4e:a5:57:ed:77:0d:
                    fc:17:fd:ca:36:4a:92:c3:43:7f:9a:b2:7a:ba:0d:
                    ea:2c:34:61:59:88:78:65:da:f0:9f:0f:3d:82:63:
                    f4:23:ff:72:04:0b:ad:0e:61:03:84:1b:a1:7c:f5:
                    c2:0b:15:39:61:34:6a:c8:a1:bb:be:00:f2:5b:74:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:3E:83:85:FF:A7:9C:05:07:D8:02:2C:AF:88:90:A6:4E:B0:D8
            X509v3 Authority Key Identifier:
                keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:56:84:a2:d1:78:e7:43:f6:95:bc:21:6f:10:d3:38:65:ed:
         91:66:53:c3:79:04:81:2e:d9:94:b0:6b:74:d7:73:c0:9b:3f:
         17:3c:2a:03:67:ac:bb:63:07:f1:ad:aa:ff:11:72:19:ab:41:
         1b:14:bb:66:b1:75:a3:28:d6:5b:ab:eb:5b:00:0c:7b:0b:3b:
         94:87:ea:57:c6:c6:23:57:af:d5:18:80:d9:eb:40:48:16:55:
         b6:37:e3:ac:df:2e:e2:97:50:b8:e6:5e:3e:8b:68:23:57:23:
         06:44:f6:fe:eb:49:11:98:c6:9f:8b:65:9f:ae:19:3e:2f:6e:
         22:b3:ea:9a:96:cc:70:37:83:39:b0:be:29:56:ca:cb:02:85:
         09:93:5e:c3:79:18:40:6f:7a:1e:2c:86:24:b1:8a:97:0e:5e:
         b8:18:e3:6b:9d:55:ea:d8:be:fc:f5:0a:ed:cf:64:55:db:07:
         c8:6f:d9:32:f4:a2:e7:14:9f:f0:80:9f:6f:41:b9:c7:b6:8f:
         f1:d7:73:ae:66:51:4f:b2:45:de:22:c8:39:b1:9b:a1:e8:f8:
         98:c1:25:24:62:40:34:ea:9f:09:6e:26:ae:c0:b3:c4:38:83:
         eb:2e:55:dd:e6:37:e3:1a:58:e0:23:4b:61:d4:7a:3e:f3:0e:
         4d:d7:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:53:31 2025 by rpki-client